TI-2019-11216 Aliases CVE-2019-15030 GHSA-hjqf-7xm5-j2g8

In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector…

LOW 21CWE-862Published 2019-09-13 · Updated 2024-08-05

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: Low · None · Low
Fix status: Partial Red Hat: 4 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-862.

Summary

In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.

Why it matters now

EPSS 0.00451 39th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Partial Red Hat: 2 advisoriesRed Hat: 4 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 8

CPE	Versions	Role	Vendor
cpe:2.3:o:linux:linux_kernel::::::::	up to 5.2.14	Vulnerable	Linux
cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::	16.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::	18.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:19.04:::::::*	19.04	Vulnerable	Canonical
cpe:2.3:o:opensuse:leap:15.0:::::::*	15.0	Vulnerable	openSUSE
cpe:2.3:o:opensuse:leap:15.1:::::::*	15.1	Vulnerable	openSUSE
cpe:2.3:o:redhat:enterprise_linux:7.0:::::::*	7.0	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*	8.0	Vulnerable	Red Hat

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions up to 5.2.14 Vulnerable ·Linux
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* Versions 19.04 Vulnerable ·Canonical
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* Versions 15.0 Vulnerable ·openSUSE
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat

Remediation

Red Hat 2 advisories

RHSA-2020:1372 Released 2020-04-07 · Red Hat rating Moderate
kernel security and bug fix update
- Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-147.8.1.el8_1
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-147.8.1.el8_1, kernel-4.18.0-147.8.1.el8_1, kernel-abi-whitelists-4.18.0-147.8.1.el8_1 +19
RHSA-2020:0740 Released 2020-03-09 · Red Hat rating Important
kernel-alt security and bug fix update
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) kernel-4.14.0-115.18.1.el7a, kernel-abi-whitelists-4.14.0-115.18.1.el7a, kernel-alt-4.14.0-115.18.1.el7a +8
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debug-devel-4.14.0-115.18.1.el7a, kernel-tools-libs-devel-4.14.0-115.18.1.el7a

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux 8	Affected	No fix yet
Red Hat CodeReady Linux Builder (v. 8)	Fixed	RHSA-2020:1372
Red Hat Enterprise Linux BaseOS (v. 8)	Fixed	RHSA-2020:1372
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	Fixed	RHSA-2020:0740
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	Fixed	RHSA-2020:0740

Not affected: 4 products

Red Hat Enterprise Linux 5
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise MRG 2

Timeline

2026-10-02 Threatist record created from CVE-2019-15030
2026-10-03 Alias added: GHSA-hjqf-7xm5-j2g8

References

Exploit 1

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8205d5d98ef7f155de211f5e2eb6ca03d95a5a60

Patch 1

http://www.openwall.com/lists/oss-security/2019/09/10/3

Advisory 6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences